Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/jWe3OWZJdxzLJkcCBHZGacx-LUg.roa
File: jWe3OWZJdxzLJkcCBHZGacx-LUg.roa (raw, json)
Hash identifier: MF4ai++RXrG4Fhd9HjxJNNSS3vUqxyig9IYqCUMCuhA=
Subject key identifier: 8D:67:B7:39:66:49:77:1C:CB:26:47:02:04:76:46:69:CC:7E:2D:48
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 01948AE7AE045C90D74CA50F031E5B1B2A21
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/jWe3OWZJdxzLJkcCBHZGacx-LUg.roa
Signing time: Tue 21 Jan 2025 22:07:06 +0000
ROA not before: Tue 21 Jan 2025 22:07:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29632
IP address blocks: 62.205.128.0/19 maxlen: 20
62.205.128.0/20 maxlen: 20
62.205.132.0/24 maxlen: 24
62.205.134.0/24 maxlen: 24
62.205.144.0/20 maxlen: 20
62.205.152.0/24 maxlen: 24
62.205.159.0/24 maxlen: 24
94.131.0.0/23 maxlen: 23
94.131.4.0/24 maxlen: 24
94.131.6.0/24 maxlen: 24
94.131.7.0/24 maxlen: 24
95.164.20.0/24 maxlen: 24
95.164.40.0/22 maxlen: 22
95.164.49.0/24 maxlen: 24
95.164.50.0/24 maxlen: 24
95.164.52.0/24 maxlen: 24
95.164.55.0/24 maxlen: 24
95.164.56.0/22 maxlen: 22
95.164.72.0/22 maxlen: 22
95.164.76.0/24 maxlen: 24
95.164.80.0/22 maxlen: 22
95.164.170.0/23 maxlen: 23
95.164.172.0/22 maxlen: 22
195.214.212.0/22 maxlen: 22
2a01:d0:303::/48 maxlen: 48
2a01:d0:305::/48 maxlen: 48
2a01:d0:308::/48 maxlen: 48
2a01:d0:317::/48 maxlen: 48
2a01:d0:31d::/48 maxlen: 48
2a01:d0:333::/48 maxlen: 48
2a01:d0:962::/48 maxlen: 48
2a01:d0:1657::/48 maxlen: 48
2a01:d0:7fff::/48 maxlen: 48
2a01:d0:8000::/33 maxlen: 33
2a01:d0:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8a:e7:ae:04:5c:90:d7:4c:a5:0f:03:1e:5b:1b:2a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 21 22:07:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d67b7396649771ccb26470204764669cc7e2d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:c3:03:4a:e5:4c:45:77:2b:fe:38:c7:25:
a6:a2:f5:01:46:09:5a:82:c5:73:43:f6:d6:c5:2e:
79:14:72:e6:38:25:bb:bf:b5:c2:15:0f:52:2a:f9:
63:40:5e:be:b1:c1:e0:f4:6e:d4:1f:b1:9f:77:b4:
c6:f9:b1:73:03:ee:33:da:dd:6f:ee:de:e2:03:27:
ea:78:b3:01:5c:43:4a:27:01:44:28:da:e6:40:5d:
be:8e:13:1f:08:2d:ad:5e:d1:34:b0:a9:c5:42:b9:
9b:b9:01:66:2d:84:f6:9c:00:01:96:6b:58:d1:b5:
7c:41:77:27:b8:2a:3d:54:a3:73:73:e4:68:9c:8b:
e7:b4:d2:81:8b:ae:d1:52:15:3e:93:13:c8:00:cf:
11:19:7c:0d:67:02:34:f3:39:06:26:44:e2:84:ba:
93:eb:0e:dd:f0:ba:25:5b:36:c2:d1:62:1e:50:e2:
12:12:e7:9c:64:d4:ba:03:c3:cf:ac:0c:cb:ef:99:
b8:d1:e7:91:53:af:7e:c4:33:27:7c:81:7d:ad:ed:
5e:d9:74:04:af:7b:ce:8e:fc:5a:a4:e3:0f:70:4d:
64:bc:72:de:1b:98:f4:bc:63:e9:63:70:3a:11:36:
86:1f:88:8f:58:e9:7b:8b:b4:20:f6:cd:eb:aa:04:
1c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:67:B7:39:66:49:77:1C:CB:26:47:02:04:76:46:69:CC:7E:2D:48
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/jWe3OWZJdxzLJkcCBHZGacx-LUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.205.128.0/19
94.131.0.0/23
94.131.4.0/24
94.131.6.0/23
95.164.20.0/24
95.164.40.0/22
95.164.49.0-95.164.50.255
95.164.52.0/24
95.164.55.0-95.164.59.255
95.164.72.0-95.164.76.255
95.164.80.0/22
95.164.170.0-95.164.175.255
195.214.212.0/22
IPv6:
2a01:d0:303::/48
2a01:d0:305::/48
2a01:d0:308::/48
2a01:d0:317::/48
2a01:d0:31d::/48
2a01:d0:333::/48
2a01:d0:962::/48
2a01:d0:1657::/48
2a01:d0:7fff::-2a01:d0:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5c:a7:ab:5c:e6:6d:d8:82:6d:db:de:a6:3b:b8:95:ce:01:8b:
23:7d:01:f0:00:f1:58:dd:b9:f4:a5:62:8f:c5:df:62:9c:5e:
6f:b6:6a:9a:ac:69:e6:7c:ea:0f:f7:f5:85:af:95:b4:09:d5:
c7:5b:91:5f:fa:06:72:f4:ac:c4:e6:31:98:dc:23:73:e4:e3:
b2:1d:01:6a:d9:1f:b5:db:26:43:57:63:b4:fb:27:29:8c:59:
38:b8:e3:1e:a2:fa:a5:a7:5b:2b:48:58:32:9c:a1:9a:be:a4:
0c:b9:4d:35:55:1f:0a:85:d5:75:5b:39:0e:48:0a:de:4b:1c:
93:d1:8b:a6:ed:95:24:d9:e6:9f:0d:b6:0c:95:19:2e:92:ce:
69:60:98:d4:0f:ef:b4:98:a7:47:62:9e:22:55:65:a1:a0:1a:
27:65:b6:fd:f2:29:88:1a:32:80:da:d2:d3:3c:0f:20:fa:55:
b2:dd:6f:78:00:cd:8f:99:88:e7:56:c3:20:2d:4b:c8:a9:6f:
fa:17:1f:ab:07:f0:00:52:dc:90:9b:4e:0e:8d:c5:34:3f:aa:
64:26:25:10:91:70:4d:00:b8:5e:98:2b:49:d1:67:4a:5f:d5:
14:69:32:67:2d:d9:f8:93:4e:ba:e0:f2:7a:f0:f8:34:41:93:
83:fe:07:5e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:16 2025 by rpki-client